Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign

An attacker has targeted a large number of GitHub repositories as part of a credential theft campaign. The campaign, known as wfx-loot, utilized thousands of compromised accounts to plant a secret stealer in over 1,800 repositories. The attacker's goal was to steal credentials, and the campaign ultimately affected a significant portion of GitHub repositories, with around 60,000 being targeted. The secret stealer was a continuous integration tool that was used to carry out the theft. The campaign's scope and scale are notable, with a substantial number of repositories being impacted. The attacker's use of hijacked accounts allowed them to carry out the campaign on a large scale.